A collection of plugins for Babel Obfuscator. Babel Obfuscator is an obuscator for .NET Framework and Mono developed by babelfor.NET
Projects and source code are available at GitHub
The DesEncrypt plugin use .NET Framework Triple DES encryption algorithm to encrypt strings and values. The decryption code injected is inside the Code folder and is retrived from managed resources to be compiled and merged into the target assembly before the obfuscation starts.
babel.exe app.exe --plugin DesEncrypt.dll --string custom --values
The ResPacker plugin can be used to compress resource streams that are retrieved calling the GetManifestResourceStream method. The compressed resouce is decompressed at runtime by replacing the call to GetManifestResourceStream with a call to decompression code.
babel.exe app.exe --plugin ResPacker.dll
The UnreadableNames plugin show how to implement a simple renaming service. The service generates unique names varing randomly the characted case of a fixed-lenght name.
babel.exe app.exe --plugin UnreadableNames.dll [--argument namelength=value] [--argument prefixlength=value] [--argument alphabet=string]
The resulting names, are quite difficult to interpret because they are all similar to each other. Example:
EwScreykfgcxxtQaMd EwScreykfgcxxTQaMd EwScreykfgCxxtqaMd EwScreykFgCXxtQaMd
This plugin adds anti-debugging code that preriodically checks if the process is running in a debugger. In case a debugger is detected, the process is terminated.
babel.exe app.exe --plugin AntiDebug.dll
The Incremental renaming plugin allows you to maintain a naming scheme for a given assembly using the generated mapping file for that assembly. Incremental renaming is desiderable when you have a set of dependent assemblies which have their public interface obfuscated and you want to redistribute one of these these assemblies because it has been modified.
babel.exe app.exe --plugin IncrementalRenaming.dll --argument mapfile=filepath